CVE-2022-21142

2022-02-2409:50:26

jpcert

www.cve.org

authentication bypass

a-blog cms

remote unauthenticated attacker

AI Score

9.9

Confidence

High

EPSS

0.006

Percentile

78.8%

JSON

Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versions prior to Ver.2.11.41 allows a remote unauthenticated attacker to bypass authentication under the specific condition.

CNA Affected

[
  {
    "product": "a-blog cms",
    "vendor": "appleple inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versions prior to Ver.2.11.41"
      }
    ]
  }
]